3 ms·
Noob here. How bad is this? AES256 is essentially uncrackable no? I think I want to move off LastPass anyway to 1password. What's best way? I assumes steps are
by domlebo70 4y ago
Noob here. How bad is this? AES256 is essentially uncrackable no? I think I want to move off LastPass anyway to 1password.
What's best way? I assumes steps are to: 1. Import lastpass stuff into 1password. Rotate all passwords?
- rencrisa 4y agoAES256 is still secure, assuming the encryption key has ~256 bits of entropy (32 random bytes). Assuming your master password is reasonably complex, hopefully the encryption key derived from your password has enough entropy. Despite this, I recommend rotating all passwords (if you don't have the time, prioritize rotating passwords on important accounts / putting MFA on them). For all we know, lastpass might have had a full compromise (i.e. access to unencrypted vaults from malicious source code commits).